The cvsup process uses port 5999
add this rule to

# Allow out FBSD (make install & CVSUP)  functions
# Basically give user root  "GOD"  privileges.
allow tcp  from me to any  out via $pif setup keep-state uid root

$pif = interface facing the public internet

-----Original Message-----
[mailto:[EMAIL PROTECTED] Behalf Of Chris
Sent: Friday, February 06, 2004 11:58 AM
Subject: firewall rule(s) for ports and packages

I'm trying out 5.1 and 5.2, and with each, I utilize IPFW2 for the
firewall. My rules allow passive FTP from the server, but often this
does not seem to cover me when adding ports. To temporarily solve
(each time with the intention to find the correct solution) I just
add a
rule at the top to allow tcp from any to any via any. When the port
install is done, I delete that rule.

This is certainly the way I've had to do it when adding ports inside
jail - even things that worked from the main server, don't get past
firewall from inside the jail. I use "to me" and "from me" to
the server, which only has one network interface. It's listening on
IPs (after creating the jail, I had to ifconfig an alias for the
interface) but I thought that "me" would imply any IP address the
interface was listening to.

Surely there is a better way. For the "me" part I can always have
rules, one allowing the appropriate traffic for each IP address
of just using "me") but what about a solution for the quick-fix when
adding ports?

[EMAIL PROTECTED] mailing list
To unsubscribe, send any mail to

[EMAIL PROTECTED] mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to